Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
File: A2G_1FDhLplUBKROs3ovnkK_4Hw.mft (raw, json)
Hash identifier: JXBS+6Um3K6J9dY/IUP2aL3SFEKvMTBnB0+XjVv2+wg=
Subject key identifier: 09:F2:1E:76:E6:49:97:0F:32:54:A1:08:44:F0:3D:ED:05:E3:5B:FB
Authority key identifier: 03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
Certificate issuer: /CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
Certificate serial: 019A1CBEA4188F115F166E3C19B311A7E1FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
Manifest number: 0374
Signing time: Sat 25 Oct 2025 19:00:47 +0000
Manifest this update: Sat 25 Oct 2025 19:00:47 +0000
Manifest next update: Sun 26 Oct 2025 19:00:47 +0000
Files and hashes: 1: A2G_1FDhLplUBKROs3ovnkK_4Hw.crl (hash: yXkBjE/SOh5iZBS3ywBdvFINtqFcrr747Oa3HwR+YiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:be:a4:18:8f:11:5f:16:6e:3c:19:b3:11:a7:e1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c
Validity
Not Before: Oct 25 19:00:47 2025 GMT
Not After : Oct 26 19:00:47 2025 GMT
Subject: CN=09f21e76e649970f3254a10844f03ded05e35bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:e7:a5:94:b5:9d:6a:ac:93:31:50:c6:05:
58:59:32:4d:9d:4a:81:a9:fc:e2:a1:f5:61:f2:60:
00:92:a0:be:bc:d5:02:8b:4d:46:7b:a6:cd:fc:0b:
d5:37:75:7c:a4:9d:f2:a6:97:2f:cf:06:2c:f7:a7:
e8:25:6d:10:af:79:a1:58:c2:0f:a0:5f:f8:59:a0:
fc:f5:8a:53:a6:0c:6b:69:05:d5:93:8a:d8:25:65:
43:b0:21:d4:7a:b0:c2:70:a2:b9:67:22:1a:72:89:
68:a4:59:fa:12:98:b0:0e:53:16:82:47:9b:55:04:
29:f9:54:f9:7b:80:9b:21:e2:d7:ab:e0:59:bb:ca:
31:84:dd:d7:13:37:2b:e0:ef:49:4a:3b:95:85:cf:
d1:c5:d6:a6:43:8e:40:ec:cd:95:59:98:f7:4f:cd:
cd:ec:8a:39:29:46:7f:73:3a:67:a5:f6:23:84:4a:
3a:bc:fc:27:d9:44:58:f5:2f:05:0b:a1:2b:4e:ec:
28:9a:b2:6a:55:ee:c6:6b:f7:17:d2:0d:a4:6e:c6:
fb:7e:cc:65:48:b3:12:b5:17:8c:76:fa:0f:3b:e6:
5e:84:86:da:64:a3:b0:d6:e7:6d:2f:0a:38:87:f3:
1b:e2:d3:d2:23:8b:be:fd:f7:5e:29:e8:91:b9:fc:
7a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F2:1E:76:E6:49:97:0F:32:54:A1:08:44:F0:3D:ED:05:E3:5B:FB
X509v3 Authority Key Identifier:
keyid:03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:25:bb:e5:02:c2:0a:5b:b6:a9:9e:ad:78:60:bd:2c:5d:cf:
37:09:f6:c3:1e:aa:8b:47:33:68:dc:85:b3:72:a1:63:e7:aa:
9d:02:59:54:63:97:23:14:3d:3e:76:3e:da:b5:af:d3:a6:a2:
51:13:8a:fd:40:83:bf:36:d1:27:2c:15:b7:57:99:b3:c7:59:
36:f0:89:fd:d2:cb:a7:4e:4d:1c:a2:3c:4d:77:8f:f9:5c:b3:
b7:e5:47:c4:a4:60:dd:0a:a8:69:55:22:3d:3b:5a:42:c2:49:
0c:88:0d:4e:df:40:07:cf:49:e0:ed:e8:1a:01:84:38:cc:56:
16:a4:d5:15:50:71:bd:e6:ad:4c:fb:59:07:39:94:17:d8:77:
87:b5:38:c6:2a:26:b3:08:a7:11:1f:70:21:fd:af:21:10:f3:
17:43:12:c3:d0:07:e7:2a:f2:aa:50:cc:ec:05:d0:9a:1e:74:
2a:2c:db:c5:8a:e0:98:01:46:11:60:6f:dc:99:6d:10:b2:20:
f3:7a:2b:98:b0:e6:36:a8:45:56:dd:17:10:93:d0:14:9a:63:
95:82:db:22:6b:ea:4a:61:bd:9f:99:e8:e9:ae:45:98:31:a8:
9a:93:04:0c:32:90:1d:67:d4:94:ea:dc:0c:c6:5b:0a:84:b2:
00:07:60:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 21:17:02 2025 by rpki-client